Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60fca455-89f9-4a8d-9b38-8ffd53c3dd54.roa
File:                     60fca455-89f9-4a8d-9b38-8ffd53c3dd54.roa (raw, json)
Hash identifier:          eW/51yZ4zsSbnmWkuab+tdojLxER/D3l8370OLr+sTg=
Subject key identifier:   AA:5F:42:C5:7C:1A:4A:6D:57:40:16:8E:2A:C3:5B:71:40:F8:02:50
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0DCDB0678293788CCEAD753237570044260826E8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60fca455-89f9-4a8d-9b38-8ffd53c3dd54.roa
Signing time:             Sat 12 Aug 2023 00:00:00 +0000
ROA not before:           Sat 12 Aug 2023 00:00:00 +0000
ROA not after:            Sat 16 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:cd:b0:67:82:93:78:8c:ce:ad:75:32:37:57:00:44:26:08:26:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 12 00:00:00 2023 GMT
            Not After : Sep 16 23:59:59 2023 GMT
        Subject: serialNumber=cee887ecd2a17c78d97500dda0a394490718e079a50dda1d344b874203f6aee0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:1a:46:97:9e:04:61:83:a7:f5:06:c2:7d:
                    7c:60:fc:81:14:dd:26:84:e5:4d:e8:e5:ac:fc:18:
                    65:08:46:e0:41:2c:f2:69:58:47:e9:e2:34:28:45:
                    69:ca:78:8a:b1:02:40:82:83:26:df:cd:19:ff:27:
                    47:88:b3:ed:94:5b:57:b1:2f:78:58:df:7f:e9:48:
                    1d:4c:12:19:3b:ff:ac:47:4f:aa:c2:88:41:66:37:
                    a6:5a:bb:bd:f8:3d:08:af:97:c8:ff:41:9e:06:85:
                    07:60:da:57:cb:96:e9:55:67:44:76:06:2a:37:7a:
                    2e:a2:e7:9a:5d:53:e2:a0:18:9f:7e:42:ea:21:a9:
                    56:ef:4c:71:b3:64:b6:28:44:f4:ca:f9:f2:45:5c:
                    4a:84:a7:d7:a4:46:c5:11:ca:83:85:cf:19:ba:c5:
                    b8:5a:db:2e:2c:bb:7d:11:b2:65:fe:42:8d:f0:c8:
                    78:6a:ee:ea:da:34:f1:4a:74:a1:99:12:01:09:3e:
                    b3:05:b0:98:02:b2:30:fc:3e:bd:8e:26:be:3d:ff:
                    2f:44:63:85:88:2a:38:de:21:56:79:fc:13:54:0a:
                    eb:6e:a5:44:f3:61:12:6f:7f:40:95:c5:d5:00:c3:
                    93:25:c5:fe:d8:6f:3b:a7:6e:95:f6:1f:a7:d9:69:
                    ce:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5F:42:C5:7C:1A:4A:6D:57:40:16:8E:2A:C3:5B:71:40:F8:02:50
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60fca455-89f9-4a8d-9b38-8ffd53c3dd54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:69:04:f9:e4:1a:87:0e:5f:ef:af:e2:2a:fd:7e:8a:aa:
         d5:87:1a:6e:e0:9d:56:e4:98:64:a5:cd:21:6e:cd:7f:34:9f:
         b1:04:d1:f6:7a:7b:d4:ba:6e:8c:96:b3:48:34:92:48:e9:7f:
         4a:06:d8:f0:c0:11:0c:30:77:f9:f3:de:65:33:ad:7a:da:30:
         1b:ce:96:d8:6f:de:fc:c0:12:91:2f:46:ea:02:69:06:fa:4b:
         75:ef:ae:75:0e:a2:d2:59:2c:57:d5:e6:31:ca:4c:67:59:19:
         9f:ed:52:35:6c:89:6e:7c:7e:88:4f:86:9a:59:de:7d:f7:c6:
         f4:77:40:f3:0c:7a:96:31:0b:a3:e6:23:1a:d2:7b:15:72:77:
         47:a5:45:fb:28:92:0a:e3:65:6f:c8:c9:b3:85:da:52:bc:86:
         fd:12:c3:c3:ad:26:32:cd:52:af:32:80:2a:a1:31:e1:a0:85:
         05:d9:ae:6f:9a:2a:78:84:f7:81:13:29:dd:08:05:41:61:ef:
         3f:06:4f:de:e3:47:18:45:9e:79:1a:6a:12:d1:0e:fe:3a:32:
         14:4e:ae:fb:91:b2:9e:e0:31:56:e1:09:5d:ee:89:de:5a:70:
         30:2b:bb:de:29:81:b8:fe:3a:f2:0d:a4:b6:b6:50:61:5b:ad:
         98:8c:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----